Rhindon Cyber logo
    Support & Documentation
    Contact Support

    AI Use Cases

    The Use Case Register is the central module for cataloging, evaluating, and governing all AI-driven initiatives within your organization. Each use case record captures business context, technical details, risk assessments, and compliance requirements to ensure responsible AI deployment.

    What Is an AI Use Case?

    An AI Use Case represents a specific application of artificial intelligence within your organization. It could be a machine learning model predicting customer churn, a generative AI tool drafting legal documents, or a computer vision system scanning invoices.

    Each use case record captures critical governance information including:

    • Business Context — Owner, department, intended audience, outputs, and purpose
    • Technical Details — AI technology type, foundation models, developer type (in-house vs. COTS), source code availability
    • Risk Assessment — Risk tier, risk score (likelihood × impact), safety and rights impact classification
    • Compliance & Governance — Regulatory frameworks (EU AI Act, NIST AI RMF, ISO 42001), DPIA requirements, bias mitigation steps
    • Data Governance — PII involvement, demographic variables, training data sources, data documentation
    • Operational Readiness — Human-in-the-loop controls, fallback processes, monitoring plans, opt-out availability

    Ways to Submit a Use Case

    RAIC provides multiple channels for submitting AI use cases, depending on your organization's plan tier and workflow preferences:

    1. Direct Registration

    All Tiers

    Users with appropriate roles (OrgAdmin, Submitter, Reviewer, Approver, WorkflowAdmin) can create a use case directly from the Use Case Register by clicking "New Use Case." This opens a comprehensive form where all fields can be populated in a single session.

    2. Internal AIREP Intake Form

    Professional+

    The AI Intake Request Engine Platform (AIREP) provides a structured intake form for internal stakeholders. Users with Submitter, IntakeAdmin, or WorkflowAdmin roles can submit proposals from within the platform. Submissions enter a triage queue where IntakeAdmins or OrgAdmins can review, approve, or reject them before they are promoted to the Use Case Register.

    Key features include:

    • Email verification via OTP for security
    • Step-by-step guided form with progress tracking
    • Automatic risk tier calculation
    • Branded confirmation emails upon submission

    3. Public AIREP Intake Link

    Enterprise Only

    Enterprise organizations can generate a shareable public intake URL (/intake/<org-slug>) that allows any employee — even those without a RAIC account — to submit an AI use case for governance review. The public form includes email domain validation and OTP verification to ensure only authorized domain emails can submit.

    OrgAdmins can share these links via the AIREP Share Links page, making it easy to distribute across the organization via email, intranet, or Slack.

    Approval Workflow

    Once submitted, AI use cases progress through a configurable multi-stage approval workflow:

    1. Submission — The use case is created and enters the review queue
    2. Risk Assessment — Reviewers evaluate the risk tier, impact, and likelihood scores
    3. Compliance Review — Regulatory framework alignment is verified (EU AI Act classification, NIST, ISO 42001)
    4. Ethics Review — Bias mitigation, fairness assessments, and human-in-the-loop controls are evaluated (configurable per org)
    5. Approval Decision — Approvers can approve, conditionally approve (with requirements), or reject the use case

    Each stage transition is fully audited with timestamps, actor names, and decision notes. Stage owners receive branded email notifications when action is required.

    Reporting & Analytics

    The platform provides comprehensive reporting on AI use cases:

    • AI Use Case Summary Report — Interactive dashboard with branded PDF export showing all registered use cases with risk tiers, compliance status, and approval stages
    • Full CSV Export — Complete data export of all use case fields for offline analysis
    • Cross-Module Mapping — Use Case summary shows linked AI Systems and Controls via the asset bridge
    • Gap Analysis — Identify use cases lacking required assessments or documentation
      Professional+

    Aslan AI Risk Assessment
    Enterprise Only

    Enterprise organizations can generate an Aslan AI-powered risk assessment for any registered AI use case. The assessment includes:

    • Risk Narrative — 2-3 paragraphs of detailed risk analysis tailored to the use case's description, AI technology type, risk categories, and data governance posture
    • Risk Scoring — Likelihood × Impact scoring with automated tier recommendation (Low, Medium, High, Critical)
    • Suggested Controls — 3-6 recommended controls with NIST AI RMF clause references and ISO 42001 mappings
    • Framework Classifications — EU AI Act and NIST classifications when those frameworks are enabled for the organization

    Users can trigger generation from the use case detail page. The workflow is human-in-the-loop: users review the AI output and choose to Accept & Apply (populates use case risk fields), Edit, or Skip.

    Accepted assessments can be exported as branded DOCX or PDF reports.